esptS^cenet - Document Bibliography and Abstract 



1/1 i 



PRINTING CONTROLLER 



Patent Number: 

Publication date: 

Inventor(s): 

Applicant(s): 



JP1 11 54070 



1 999-06-08 



ASANO SADAJI 
FUJI XEROX CO LTD 



Requested Patent: □ JPJ.1 154070 
Application Number: JP19970337674 19971121 
Priority Number(s): 

IPC Classification: G06F3/12; G06F13/00; G06F13/00 

EC Classification: 

Equivalents: 



PROBLEM TO BE SOLVED: To ensure security of printing data transfer, based upon the FTP protocol. 
SOLUTION: In a security user list 11, users who are allowed to perform security-printing are registered 
in advance. A user recognition part 10 stores received data in a security spool 90 on condition that a 
received user command as an FTP protocol command or information on a path command is registered 
In the list 1 1 , A manual printing control part 13 reads a stored data out of the security spool 90 and 
transfers them to a printer engine when a security user name is Inputted from a console 5 together with 
a printing request. 
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(54) PRINTING CONTROLLER 
(57)Abstract: 

PROBLEM TO BE SOLVED: To ensure security of printing data transfer, 
based upon the FTP protocol. 

SOLUTION: In a security user list 1 1. users who are allowed to perform 
security-printing are registered in advance. A user recognition part 10 
stores received data in a security spool 90 on condition that a received 
user command as an FTP protocol command or information on a path 
command is registered in the list 11. A manual printing control part 13 
reads a stored data out of the security spool 90 and transfers them to a 
printer engine when a security user name is inputted from a console 5 
together with a printing request. 
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* NOTICES * 

^apan Patent Office is not responsible for any 
damages caused by the use o£ tbis translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[The technical field to which invention belongs] this invention relates to a suitable print control unit to print a **** 
print file by the printer (henceforth a "printer") especially connected through the network about a print control unit. 
[0002] 

[Description of the Prior Art] As a system gestalt which connected the computer to the network, the vertical-type 
network centering on a general-purpose large-sized computer, i.e., a mainframe, is known. Moreover, the system 
gestalt which connected two or more workstations to the local area network (LAN) is increasing in recent years 
according to the downsizing (miniaturization) inclination of computer system. 

[0003] It may print in the printer set under such a network environment, the file, i.e., the **** print file, which needs a 
security protection. In order to print a **** print file safely, it is most desirable for the operator to whom a printing 
claimant and the qualification for outputting a **** print file beforehand are given to do a direct control on the console 
of a printer, and to perform printing. 

[0004] However, it is necessary to restrain a qualified person to a printer from the transfer start of **** print data to a 
printing end, and, for that, realization is not easy. In order to cancel this trouble, in JP,7- 134681, A, the print control 
unit of the **** print file in a vertical-type network is indicated. In this print control unit, it can be made to perform 
protection of **** data using the job information added to these print data at the time of a transfer of print data, 
without restraining a qualified person. 
[0005] 

[Problem(s) to be Solved by the Invention] There are the following troubles in the above-mentioned print control unit. 
The workstation connected to a level type network and the printer are carrying out conversation and transfer of data 
through the communications protocol which is mutually common. 

[0006] There are many kinds of communications protocol used in a level type network, and it is difficult for the 
workstation and printer on a network to deal with all communications protocols. Then, the method transmitted to a 
printer by considering print data as a file is taken in many cases by mounting at least the FTP protocol which is a 
standard file transfer protocol considered to be mounted to the present printer most generally. 

[0007] However, there was no convention about a transfer of a **** print file on the agreement of a FTP protocol, and 
it was inadequate for it fi*om a viewpoint of security reservation. Therefore, the method which can discriminate a **** 
print file from a print file, and can secure security was demanded, without changing the FTP protocol which is a 
standardized file transfer protocol. 

[0008] this invention cancels the above-mentioned trouble, and it aims at offering the print control unit which can 

distinguish a **** print file, without changing a general-purpose file transfer protocol. 

[0009] 

[Means for Solving the Problem] this invention for solving the above-mentioned technical problem and attaining the 
purpose In the print control unit of the print server which prints the print data which received through the FTP protocol 
Whether the aforementioned print data which received are ♦*** print files [ the list which registered security user- 
identification information, and ] A **** print file recognition means to distinguish with reference to the security user- 
identification information included in the user-identification information on a FTP protocol command, and the 
aforementioned list, A **** print-data storing means to store the print data and the aforementioned user-identification 
information which were judged to be a **** print file by the aforementioned **** print file recognition means, A 
printing start directions means to input security user-identification information and printing start directions. The feature 
is in the point of having provided the manual printing control means which answer the input of the aforementioned 
security user-identification information and printing start directions, and read print data from the aforementioned **** 
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print-data storing means, and the printer engine which prints the aforementioned print data. 

^[0010] According to the above-mentioned feature, it is judged by whether the user-identification information on a FTP 
protocol command is on the Hst of schedules whether print data are ♦*** print files, and a **** print file is stored in a 
**** print-data storing means by the judgment result. Furthermore, this **** print file is read to a printer engine, when 
security user-identification information inputs. 
[0011] 

[Embodiments of the Invention] Hereafter, the operation gestalt of this invention is explained in detail with reference 
to a drawing. D rawin g 2 is the block diagram showing the composition of the print server containing the print control 
unit concerning one example of this invention. A print server 1 consists of printer control unit 1 a and printer engine 
(lOT), i.e., end of image outgoing end, lb in this drawing. Printer control unit la receives print data fi-om the client 
host 3 through a host interface (I/F) 2. After being rasterized, through a printer interface (I/F) 4, the received print data 
are transmitted to lOTlb, and are printed. 

[0012] Printer control unit la is realizable with the microcomputer which serves as the operating set (console) 5 
containing an input means and display units, such as a keyboard, fi-om ROM6, RAM7, and CPUS. In addition, fixed- 
disk equipment 9 is formed as auxiliary memory. 

[0013] The host interface 2 and the client host 3 of a print server 1 have the function to perform the program which 
performs a FTP protocol, i.e., a FTP server program, and a FTP client program, respectively. 
[0014] Drawing 1 is the block diagram showing the important section control fiinction of the aforementioned print 
server 1 . The host interface 2 which performs a FTP server program performs FTP protocol processing, and receives 
print data from the client host 3. The user name described as one of the parameters of the user command (USER) of the 
FTP command which the host interface 2 received to the login demand of FTP distinguishes whether it is a qualified 
person name. The qualified person name to which printing of the security user name as security user information 
registered into the aforementioned user command and the security user list 1 1 , i.e., a **** print file, is specifically 
permitted in the user recognition section 10 as a means which recognizes a ♦*** print file is compared and 
discriminated. The security user name is beforehand inputted by the operator from the console 5. In the example of 
illustration. User A and User S are registered as a security user. 

[0015] When the aforementioned user command is contained in the security user name on the seciuity user list 1 1, the 
print data which received are stored in the security spool 90. On the other hand, when the aforementioned user 
command is not contained in the security user name on the security user list 1 1 , the print data which received are stored 
in the common spool 91 . 

[0016] The print data stored in the common spool 91 are automatically transmitted one by one to lOTlb by the 
automatic printing control section 12, when the print data for one print SHOBU gather. Moreover, after the print data 
stored in the security spool 90 pass through check processing of a user name by the manual printing control section 13, 
they are transmitted to lOTlb. 

[0017] A console 5 outputs the enabling signal which confirms the manual printing control section 13, when it 
distinguishes whether the user name is registered into the security user list 1 1 and the user name is registered, if a user 
name is inputted. The manual printing control section 1 3 compares the user name inputted into the degree from a 
console 5 with the user name in which it is stored by the security spool 90 with print data, if the aforementioned 
enabling signal is received from a console S. When both user names are in agreement as a result of comparison, print 
data are read from the security spool 90, and it transmits to lOTlb. 

[0018] Processing of the above-mentioned printer control unit is explained with reference to a flow chart. If it judges 
whether the FTP command was received at Step SI and judgment is affirmation in drawing 3 , it will progress to Step 
S2, and it judges whether the user command is registered into the security user list 1 1 . If this judgment is affirmation, 
the print data which progressed to Step S3 and received are stored in the security spool 90. If Step S2 is negative, it 
will progress to Step S4, and the print data which received to the common spool 91 are stored. 
[0019] Drawing 4 is a flow chart at the time of printing. It waits for a printing demand at Step S 10. If a printing 
demand is inputted from a console 5, it will progress to Step SI 1 . At Step SI 1, the display to which the input of a user 
name is urged is outputted to the display screen of a console 5. At Step SI 2, it judges whether the inputted user name is 
registered into the security user list 1 1. If this judgment is affirmation, it will progress to Step SI 3, and it judges 
whether the user name stored with the print data which received to the security spool 90, and the user name inputted 
with the printing demand from the console 5 are in agreement. 

[0020] If a user name is in agreement, it will progress to Step SI 4, and the print data on the security spool 90 are 
transmitted to lOTlb. When a user name is not in agreement, or when the user name is not registered into the security 
user list 1 1, it shifts to Step S15 from Steps S12 and S13. At Step S15, error processing which outputs the display with 
"improper" printing to a console 5, for example is carried out. 
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[0021] Drawing 5 is the command sequence of the FTP protocol between the client host 3 and a print server 1 . In this 
^drawing, succeedingly, if a connection request is advanced from the client host 3, a print server 1 will answer this, and 
a user command (USER) and a path command (PASS) are sent out from the cHent host 3, and from a print server, if 
there is a response of these commands, a login success will be checked. Although various command sequences can be 
taken according to the purpose after login is successful, the easy sequence aiming at a file transfer is raised as an 
example here. 

[0022] The client host 3 tells file types, such as a binary and ASCII, with a type command (TYPE) after a login 
success. It is because the transmittal mode changes with file types. Furthermore, the client host 3 notifies a port number 
required for a file transfer to a print server 1 with a port command (PORT). Finally, the client host 3 publishes a store 
command (STOR), and gives a file transfer demand to the file name to transmit. 

[0023] The print server 1 which received the store command establishes the new connection for data transfer using the 
port number of the port command received previously. The client host 3 starts the data transfer to a print server 1 after 
receiving the transfer permission response to a store command from a print server 1 . After a print server 1 receives the 
conmiand EOF which shows the end of data, data transfer is ended witii the end Acknowledgement from a print server 
1 . With the above-mentioned operation form, the user name set up as one of the parameters of the user command 
svirely sent out from the client host 3 by the above-mentioned FTP sequence was distinguished, and security processing 
was carried out. 

[0024] Then, the 2nd operation gestalt of the invention in this application is explained. With this 2nd operation gestalt, 
a security user is distinguished based on the password set up as a parameter of the path command (PASS) in the 
sequence shown in drawirig 5 . Therefore, the aforementioned security user list 1 1 is transformed like drawing 6 . In 
drawing 6 , two passwords are registered into each user name by the security user list 1 1 . The 1st password (path 1) is a 
general user's password, and the 2nd password (path 2) is a security user's password. That is, when for example, the 
user A wants to print a general file by having two passwords, it is a user name (USERA). Path 1 (com) When you want 
to describe to a path command and to print a security file, it is a user name (USERA). Path 2 (SEC) It is made to 
describe to a path conmiand. 

[0025] When the aforementioned user recognition section 1 0 receives a user command and a path command in this 2nd 
operation gestalt, the print data which received when the password described by the path conmiand was the path 1 
registered into the security user list 1 1 are stored in the aforementioned general spool 91, and if a password is a path 2, 
the print data which received are stored in the security spool 90. 

[0026] Moreover, when outputting the print data stored in the security spool 90 to lOTlb, the manual printing control 
section 13 is confirmed by the result which compared with the password (path 2) of the security user list 1 1 of drawing 
6 the password inputted fVom the console 5. And when in agreement with the password with which the password 
inputted from the console 5 is further stored in the security spool 90 with print data, print data are transmitted to lOTlb 
from the security spool 90. 

[0027] It is the same as that of the example shown in drawing 1 - drawing 4 in short in processing except for the point 
that distinction processing of the user name explained about the 1st operation gestalt was transposed to distinction 
processing of a password with the 2nd operation gestalt. In this way, with the 2nd operation gestalt, it judged any are 
contained in the FTP protocol command among two passwords, and the general print file or the **** print file was 
distinguished. Therefore, a user can store in any of a common spool and a security spool, or a desired thing the file 
which is the candidate for a printing demand of self by whether which password is used. 
[0028] 

[Effect of the Invention] The security of a **** print file can be secured without [ without it changes the FTP protocol 
command currently widely used for the transfer of print data according to this invention so that clearly from the above 
explanation, and ] adding change to the FTP program by the side of a client host, i.e., print-data supply. That is, in a 
client host side, without being conscious of the security function by the side of a print server, since it can process, a 
security system can be easily realized on the existing network. 



[Translation done.] 
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2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DRAWINGS 



[Drawing 1] 



USER A 
USER S 



1 



J.— 




I 



T 

90 



r — ^ 



1 3 



1 



9 1 
1 2 



MM 



I OT 



7 

1 6 



[Drawing 6] 
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[Drawing 3] 
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[Drawing 4] 
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